20.08.2015 Views

SELinux in Android Lollipop and M

lss2015_selinuxinandroidlollipopandm_smalley

lss2015_selinuxinandroidlollipopandm_smalley

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>SEL<strong>in</strong>ux</strong> <strong>and</strong> <strong>Android</strong> Multi-User●●●Goal: Re<strong>in</strong>force <strong>Android</strong> multi-user separationtransparently, without complicat<strong>in</strong>g policy.Map user identity to unique MLS level (us<strong>in</strong>gcategories), assign to app processes <strong>and</strong> files.MLS constra<strong>in</strong>ts prevent communicationsacross different levels.– except via B<strong>in</strong>der, which is mediated by middleware13

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!